Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa
File: 2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa (raw, json)
Hash identifier: C3+srNA9Ocs+XUyQQLmdXVcGWuZP9NzlxPcRTZjbIL0=
Subject key identifier: E7:88:21:92:36:96:6B:5C:C0:58:31:FA:C0:DA:5A:53:2C:65:5D:D6
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F43285848E8665E8136459AF3199B6140
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa
Signing time: Mon 17 Feb 2025 02:00:38 +0000
ROA not before: Mon 17 Feb 2025 02:00:38 +0000
ROA not after: Sun 18 May 2025 01:00:38 +0000
asID: 211440
IP address blocks: 108.165.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:e8:66:5e:81:36:45:9a:f3:19:9b:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Feb 17 02:00:38 2025 GMT
Not After : May 18 01:00:38 2025 GMT
Subject: CN=ba95f8cc-df2e-4ede-9c4c-ab2b514494ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f3:85:ae:02:33:c7:e8:c4:2b:a6:ed:ab:98:
16:c2:8d:82:5c:a4:5a:42:99:84:51:dc:fd:f4:99:
f5:a1:ae:f2:74:63:a4:46:8c:54:ff:d7:e5:53:67:
ca:3b:ec:c3:67:fc:d5:2c:b5:71:5c:69:7d:5a:6a:
59:1a:c0:0d:a4:19:49:7e:2e:b1:ff:f8:0e:a1:11:
b8:1a:97:af:d1:49:9e:54:e6:7c:26:3c:12:bf:45:
99:2f:e8:46:07:10:28:55:2a:d9:fd:79:f7:9f:51:
1a:83:b2:10:f1:ee:5c:ad:bb:2c:51:75:ae:53:ee:
36:e5:df:a1:b0:02:c7:fb:fe:40:b2:a1:9b:79:18:
88:e7:ed:f1:1a:31:0c:5f:51:b2:18:79:42:d8:e7:
17:cc:d1:d5:16:b2:4c:e3:60:23:79:35:5f:4b:1e:
60:6d:c6:e6:d3:b6:46:38:ca:01:e6:d7:a3:cb:d9:
fc:66:22:ce:4f:17:b1:f5:b7:54:f6:4e:ef:e7:5e:
dc:cd:b6:61:f4:8f:17:34:41:a3:6a:34:46:1e:7a:
16:b5:8c:31:09:cb:4f:3e:a7:75:fe:f5:30:0f:2d:
f4:2b:12:a1:da:27:51:eb:03:4e:e2:f0:b9:88:ad:
bc:fa:43:5b:62:86:a2:ba:ea:7e:40:ff:7a:d8:09:
17:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:88:21:92:36:96:6B:5C:C0:58:31:FA:C0:DA:5A:53:2C:65:5D:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2efc7d37-1fe2-3f03-8959-e903fef9f48c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:3f:ed:f1:f2:cc:b7:c2:b6:c7:0c:09:ec:ed:4b:87:4d:52:
cc:d0:c1:da:62:30:83:73:61:ac:49:6b:1c:2d:05:1a:7d:cf:
67:ba:3f:98:80:83:0d:08:b9:4b:4e:91:86:14:b1:65:c0:6e:
21:0d:0e:97:b2:80:7f:31:83:e0:d8:00:ca:07:d3:e6:44:d6:
99:25:f4:89:50:0d:22:b5:19:19:8d:49:3c:e4:34:63:62:aa:
70:77:3a:6d:1a:59:76:5a:ad:c5:11:bc:6d:fd:2d:81:cc:e6:
78:2d:4b:f0:fd:2f:d9:21:6f:ad:85:56:6f:50:b3:45:11:14:
b5:8f:84:87:37:57:75:86:ba:16:35:ed:d2:f7:f4:00:07:9b:
94:aa:0f:ce:2f:9a:7e:d6:55:cf:e4:47:ef:5a:ca:9a:3b:40:
0a:58:c5:02:e2:32:d7:5a:55:ec:c7:41:93:bd:8e:7c:52:db:
ea:11:59:12:0d:26:61:32:31:47:d1:4b:5c:4f:9d:2c:45:13:
79:2a:29:9f:f8:2f:f3:69:aa:a6:38:c2:dd:23:dd:0e:28:54:
11:1d:95:f3:9b:f3:1c:37:cc:a7:22:b0:52:06:43:4f:e0:ee:
28:19:25:0b:43:29:e7:03:e9:b1:1d:0d:b9:26:fc:54:c6:01:
1f:cc:aa:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjoZl6BNkWa8xmbYUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw
YzA5MB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk
YmE5NWY4Y2MtZGYyZS00ZWRlLTljNGMtYWIyYjUxNDQ5NGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7POFrgIzx+jEK6btq5gWwo2CXKRaQpmEUdz9
9Jn1oa7ydGOkRoxU/9flU2fKO+zDZ/zVLLVxXGl9WmpZGsANpBlJfi6x//gOoRG4
Gpev0UmeVOZ8JjwSv0WZL+hGBxAoVSrZ/Xn3n1Eag7IQ8e5crbssUXWuU+425d+h
sALH+/5AsqGbeRiI5+3xGjEMX1GyGHlC2OcXzNHVFrJM42AjeTVfSx5gbcbm07ZG
OMoB5tejy9n8ZiLOTxex9bdU9k7v517czbZh9I8XNEGjajRGHnoWtYwxCctPPqd1
/vUwDy30KxKh2idR6wNO4vC5iK28+kNbYoaiuup+QP962AkXrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOeIIZI2lmtcwFgx+sDaWlMsZV3WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl
YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmVmYzdkMzctMWZlMi0z
ZjAzLTg5NTktZTkwM2ZlZjlmNDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm
OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy
MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3
ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbKXxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGs/7fHyzLfCtscMCeztS4dNUszQwdpiMINzYaxJaxwtBRp9z2e6P5iA
gw0IuUtOkYYUsWXAbiENDpeygH8xg+DYAMoH0+ZE1pkl9IlQDSK1GRmNSTzkNGNi
qnB3Om0aWXZarcURvG39LYHM5ngtS/D9L9khb62FVm9Qs0URFLWPhIc3V3WGuhY1
7dL39AAHm5SqD84vmn7WVc/kR+9aypo7QApYxQLiMtdaVezHQZO9jnxS2+oRWRIN
JmEyMUfRS1xPnSxFE3kqKZ/4L/NpqqY4wt0j3Q4oVBEdlfOb8xw3zKcisFIGQ0/g
7igZJQtDKecD6bEdDbkm/FTGAR/MqnU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:37 2025 by rpki-client